Skip to content

Instantly share code, notes, and snippets.

View zeroSteiner's full-sized avatar

Spencer McIntyre zeroSteiner

View GitHub Profile
@zeroSteiner
zeroSteiner / meterpreter_patch_check.md
Last active August 29, 2015 14:01
Meterpreter Check If A Patch Is Installed

Drop into IRB:

meterpreter > irb
[*] Starting IRB shell
[*] The 'client' variable holds the meterpreter client

>> 

Then paste in the following, replacing the KB identifiers at the end with the desired ones.

@zeroSteiner
zeroSteiner / chromoting_hash.py
Created December 15, 2014 15:19
Chromoting Secret Hash Calculation
import base64
import hashlib
import hmac
host_id = '11111111-2222-3333-4444-555555555555'
host_secret_hash = 'hmac:TI/gifEUGbMsEhiZSLY0PcTX4xyPzpvcb7b6seOhOYc='
secret_pin = '123456'
if 'hmac:' + base64.b64encode(hmac.new(host_id, secret_pin, hashlib.sha256).digest()) == host_secret_hash:
print('[+] secret hashes match!')
@zeroSteiner
zeroSteiner / module_suggestor.rb
Created December 18, 2014 15:19
Suggest local exploit modules
require "json"
require "rex/ui"
module Msf
class Plugin::ModuleSuggestor < Msf::Plugin
class ModuleSuggestorCommandDispatcher
include Msf::Ui::Console::CommandDispatcher
def name
"Module Suggestor"
@zeroSteiner
zeroSteiner / keybase.md
Created February 17, 2015 21:09
keybase.md

Keybase proof

I hereby claim:

  • I am zeroSteiner on github.
  • I am zerosteiner (https://keybase.io/zerosteiner) on keybase.
  • I have a public key whose fingerprint is BD67 B5AC B947 C9D7 3035 9ECD C00D 6B6A A5E1 5412

To claim this, I am signing this object:

@zeroSteiner
zeroSteiner / meterpreter_transport.rb
Created July 1, 2015 18:33
Metasploit meterpreter transport test module
require 'msf/core'
require 'rex'
lib = File.join(Msf::Config.install_root, "test", "lib")
$:.push(lib) unless $:.include?(lib)
require 'module_test'
class Metasploit4 < Msf::Post
@zeroSteiner
zeroSteiner / crontab
Created September 21, 2015 15:29
crontab one time payload execution template
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
@zeroSteiner
zeroSteiner / AdvancedHTTPServer.py
Last active December 10, 2015 22:29
A set of classes to make creating HTTP servers with common features such as threading, SSL, basic authentication, 301 redirects, and RPC servers simple.
#!/usr/bin/env python
# -*- coding: utf-8 -*-
#
# AdvancedHTTPServer.py
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
#
# * Redistributions of source code must retain the above copyright
@zeroSteiner
zeroSteiner / firebird_dos.py
Last active December 14, 2015 13:29
Firebird Denial of Service Proof of Concept
#!/usr/bin/env python
"""
firebird_dos.py
Discovered: 1-31-2013
By: Spencer McIntyre (zeroSteiner)
SecureState Research and Innovation Team
www.securestate.com
@zeroSteiner
zeroSteiner / eapbrute.py
Last active December 15, 2015 18:19
EAP brute forcing utility The mschapext module is not available.
# -*- coding: utf-8 -*-
#
# eapbrute.py
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
#
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
@zeroSteiner
zeroSteiner / pty_helper.py
Last active December 16, 2015 20:19
PTY Helper
#!/usr/bin/env python
# -*- coding: utf-8 -*-
import os
import select
import threading
class PTYConnector(threading.Thread):
def __init__(self):
super(PTYConnector, self).__init__()